CVE-2026-15637

Devolutions Server versions 2026.2.11 and 2026.1.22 are vulnerable to an improper authorization flaw in the PAM SSH key and certificate retrieval endpoints . An authenticated low-privileged user can disclose the private key of an SSH key or certificate PAM credential by using a direct object refe...

CVE-2023-32263

A potential vulnerability has been identified in the Micro Focus Dimensions CM Plugin for Jenkins. The vulnerability could be exploited to retrieve a login certificate if an authenticated user is duped into using an attacker-controlled Dimensions CM server. This vulnerability only applies when th...

wget:wget_options_fuzzer: Heap-use-after-free in gnutls_certificate_free_credentials

Detailed Report: https://oss-fuzz.com/testcase?key=5204083317276672 Project: wget Fuzzing Engine: honggfuzz Fuzz Target: wgetoptionsfuzzer Job Type: honggfuzzasanwget Platform Id: linux Crash Type: Heap-use-after-free READ 8 Crash Address: 0x61400000e470 Crash State:...

Certificate file read vulnerability in credentials

Credentials Plugin allowed the creation of Certificate credentials from a PKCS12 file on the Jenkins controller. Users with permission to create or update credentials could use the associated form validation to confirm the existence of files with an attacker-specified path. Additionally, they cou...

PT-2019-8741

Name of the Vulnerable Software and Affected Versions Kubernetes versions prior to v1.14.0 Description The issue arises from improper validation of URL redirection in the Kubernetes API server, allowing an attacker-controlled Kubelet to redirect API server requests to arbitrary hosts. This can le...